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DETECTOR AUTOC AL I B RATIO N IN QKD SYSTEMS 
Technical Field 

The present invention relates to quantum cryptography, and in particular relates to 
apparatus and methods of photon detector autocalibration in quantum key distribution 
(QKD) systems to maintain optimal system performance. 

Background Information 

Quantum key distribution involves establishing a key between a sender ("Alice 0 ) and 
a receiver ("Bob") by using weak (e.g., 0.1 photon on average) optical signals transmitted 
over a "quantum, channel." The security of the key distribution is based on the quantum 
mechanical principal that any measurement of a quantum system in unknown state will 
modify its state. As a consequence, an eavesdropper ("Eve") that attempts to intercept or 
otherwise measure the quantum signal will introduce errors into the transmitted signals, 
thereby revealing her presence. 

The general principles of quantum cryptography were first set forth by Bennett and 
Brassard in their article "Quantum Cryptography: Public key distribution and coin tossing," 
Proceedings of the International Conference on Computers, Systems and Signal 
Processing, Bangalore, India, 1984, pp. 175-179 (IEEE, New York, 1984). A specific QKD 
system is described in U.S. Patent No. 5,307,410 to Bennet (the '410 patent). 

The above-mentioned publications each describe a so-called "one-way" QKD 
system wherein Alice randomly encodes the polarization or phase of single photons, and 
Bob randomly measures the polarization or phase of the photons. The one-way system 
described in the Bennett 1992 paper is based on two optical fiber Mach-Zehnder 
interferometers. Respective parts of the interferometric system are accessible by Alice and 
Bob so that each can control the phase of the interferometer. The signals (pulses) sent 
from Alice to Bob are time-multiplexed and follow different paths. As a consequence, the 
interferometers need to be actively stabilized to within a few tens of nanoseconds during 
transmission to compensate for thermal drifts. 

U.S. Patent No. 6,438,234 to Gisin (the '234 patent), which patent is incorporated 
nerein Dy reference, discloses a so-called "two-way" QKD system that is autocompensated 
for polarization and thermal variations. Thus, the two-way QKD system of the '234 patent is 
less susceptible to environmental effects than a one-way system. 

When operating a commercial QKD system, multiple variables need to be aligned in 
Sme and then maintained aligned for optimal system performance. For example, in a 
scmmercial QKD system one or more single-photon detectors are gated with a gating pulse 
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times. However, once the system is set up, the timing drifts due to various systemic and 
environmental factors and the photon count can drop. This leads to a reduction in the 
transmission rate of the system, and also to an increase in the bit-error rate — i.e., to less 
than optimal system performance. 

While laboratory and prototype QKD systems can be adjusted to account for system 
drifts can under very controlled and artificial conditions, making the necessary adjustments 
for a commercial QKD system in the field is a far more daunting endeavor. And, unlike with 
a laboratory or prototype QKD system, end-users of commercial QKD systems have an 
expectation that their QKD system will automatically run in an optimal state with minimal or 
no operator intervention. 

Summary of the Invention 

A first aspect of the invention is a method of performing autocalibration of a single- 
photon detector arranged to detect weak photon pulses in a quantum key distribution 
(QKD) system. The method includes performing a detector gate scan by sending a 
detector gate pulse to the single-photon detector and varying an arrival time T of the 
detector gating pulse over a first select range R1 to determine an optimal arrival time Tmax 
that corresponds to a maximum number of photon counts Nmax from the single-photon 
detector. The method further includes performing detector gate dithering by varying the 
arrival time T over a second select range R2 surrounding Tmax to maintain the photon count 
at a maximum value. 

A second aspect of the invention is method of exchanging a key in a quantum key 
distribution (QKD) system having a single-photon detector operably coupled to a controller. 
The method includes sending weak photon pulses between encoding stations in the QKD 
system, and performing a first detector gate scan. The first detector scan is accomplished 
by sending a detector gate pulse from the controller to the detector over a range of detector 
gate pulse arrival times T to establish a first optimal arrival time T M ax corresponding to a 
first maximum number of photon counts Nmax from the detector. The method also includes 
terminating the first detector gate scan when the first Tmax is established, and then 
performing a first detector gate dither. The first detector gate dither is accomplished by the 
controller altering the arrival time T over a range of arrival times R2 about the first Tmax to 
maintain either the maximum number of photon counts Nmax or a different maximum 
number of photon counts N'max over the range R2. 

A third aspect of the invention is a continuation of the method of the second aspect 
of the invention, wherein performing the detector gate dither results in a new optimal arrival 
time TW. The method of the third aspect of the invention includes terminating the 
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performing of a detector gate dither, performing a second detector gate scan, terminating 
the second detector gate scan, and then performing a second detector gate dither. 

Brief Description of the Drawings 

FIG. 1 is an example embodiment of a two-way QKD system; and 

FIG. 2 is a flow diagram illustrating the autocalibration of the detector through the 
use of scanning and dithering of the detector gate pulse to optimize the performance of the 
QKD system of FIG. 1; and 

FIG. 3 is an example plot of a single-photon detector gate scan for a QKD system 
such as shown in FIG. 1, wherein the Y-axis is the number of photon counts N in a regular 
time interval, and the X-axis is the timing of the single-photon detector gate associated with 
the timing (position) of the detector gate pulse; and 

The various elements depicted in the drawings are merely representational and are 
not necessarily drawn to scale. Certain sections thereof may be exaggerated, while others 
may be minimized. The drawings are intended to illustrate various embodiments of the 
invention that can be understood and appropriately carried out by those of ordinary skill in 
the art. 

Detailed Description of the Invention 

The present invention has industrial utility in connection with methods of performing 
autocalibration of one or more detectors in a QKD system in order to maintaining optimal 
system performance of the QKD system. The invention includes performing gate pulse 
scanning to determine the optimal detector gate pulse position (timing), as well as 
performing detector gate pulse timing dithering in order to maintain the optimal detector 
gate pulse size (i.e., width) and position during the QKD system's operation. This results in 
optimal optical pulse detection in the QKD system, which generally corresponds to the 
optimal operation of the QKD system as a whole, even if environmental conditions vary in a 
manner that would otherwise affect system performance. 

The invention has industrial utility for one-way, two-way and ring topology or n-way 
QKD systems using either polarization encoding or phase encoding, and using one or more 
single-photon detectors. The invention is described below in connection with an example 
embodiment of a two-way QKD system using phase-encoding and a single detector. This 
choice of QKD system is merely for the sake of illustrating the methods of the present 
invention and is not intended as limiting. 

Also, in the description below, a "gating pulse" is a pulse that activates the element 
to which the pulse is sent, wherein the activation of the element corresponds to the duration 
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(width W) of the pulse. Thus, the detector gate pulse activates the detector for the duration 
(i.e., width) of the detector gate pulse, wherein activation starts at the leading edge of the 
pulse and ends at the trailing edge of the pulse. 

QKD system embodiment 

FIG. 1 is a schematic diagram of an example embodiment of a folded QKD system 
200 to which the methods of the present invention are aptly suited. System 200 includes 
two key encoding stations: a transmitting/receiving station Bob and a reflecting station 
Alice, referred to hereinafter simply as "Bob" and "Alice." 

Bob 

With continuing reference to FIG. 1, Bob includes a laser 202 that emits light pulses 
204. Laser 202 is coupled to a time-multiplexing/demultiplexing optical system 206 having 
an input end 208A, an input/output end 208B, and a detector output end 208C. Optical 
system 206 receives input pulses 204 at input end 208A, splits each pulse into two time- 
multiplexed pulses P1 and P2 and outputs them at input/output end 208B. Likewise, optical 
system 206 also receives optical pulses at input/output end 208B, as described below. 

A single-photon detector 216 is coupled to optical system 206 at detector output end 
208C. A phase modulator (PM) 220 is coupled (e.g., by an optical fiber) to optical system 
input/output end 208B. An optical fiber 240 connects Bob to Alice at PM 220. 

Bob also includes a controller 248 operatively (e.g., electrically) coupled to laser 
202, detector 216, and PM 220 to control the operation of these elements, as described 
below. In an example embodiment, controller 248 includes a programmable computer 
capable of performing instructions (e.g., "software") stored on a computer-readable medium 
250. In an example embodiment, the instructions stored on the computer-readable medium 
250 include methods according to the present invention as described below. 

Alice 

Alice includes a variable optical attenuator (VOA) 264 connected to optical fiber 240. 
A phase modulator (PM) 266 is arranged downstream of and is optically coupled to VOA 
264. A Faraday mirror 270 is arranged downstream of and is optically coupled to PM 266. 

Alice also includes a controller 288 operatively (e.g., electrically) coupled to PM 266 
and VOA 264. In an example embodiment, controller 288 includes a programmable 
computer capable of performing instructions (e.g., "software 11 ) stored on a computer- 
readable medium 289. In an example embodiment, the instructions stored on the 
computer-readable medium 289 include methods according to the present invention as 
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Controllers 248 and 288 are linked (e.g., electrically or optically) via link 290 to 
synchronize the operation of Alice and Bob. In particular, the operation of the phase 
modulators 220 and 266, and detector 216 are controlled and coordinated by controllers 
248 and 288 relative to the launched optical pulse 204 using gating signals S2, S3 and S1, 
respectively, when exchanging a quantum key between Alice and Bob. Thus, in an 
example embodiment, controllers 248 and 288 can be considered as constituting a single 
controller for the QKD system. 

QKD System Operation 

With continuing reference to FIG. 1, in the operation of system 200, pulse 204 is 
divided into two separate pulses P1 and P2 by time-multiplexing/demultiplexing optical 
system 206. In the present example embodiment, pulses P1 and P2 are relatively weak 
pulses The pulses are passed out of optical system input/output end 208B to PM 220, 
which is gated to allow the pulses to pass therethrough unmodulated. Pulses P1 and P2 
then pass to Alice over optical fiber 240. Pulses P1 and P2 continue to VOA 264, which 
can attenuate the pulses if necessary. The pulses then pass through PM 266 and are 
reflected by Faraday mirror 270, and then pass back through PM 266 a second time. 

During one of the passes of pulses P1 and P2 through PM 266, the PM modulates 
one of the pulses - say, pulse P1 - to form a phase-modulated pulse P1\ This is achieved 
by controller 288 sending a well-timed gating signal S1 that activates PM 266 for the short 
period of time (i.e., less than the time-separation between the pulses) when pulse P1 
passes through PM 266. Pulses P1 and P2 then pass back through VOA 264, which can 
attenuate the pulses if necessary. The pulses then pass back to Bob and to PM 220 
therein. PM 220 is then directed to randomly modulate the remaining unmodulated pulse — 
in this case, pulse P2 - with one of the select phase modulation values. This is achieved 
by controller 248 providing a well-time gating signal S2 to PM 220 that activates the phase 
modulator during the short time period within which pulse P2 passes through PM 220. 

Now-modulated pulses P1' and P2' (the latter is not shown in FIG. 1) continue on to 
optical system 206. Optical system 206 combines the pulses to form a combined pulse 
P3 : which is directed out of detector output end 208C to detector 216. Detector 216 
receives combined pulse P3 and outputs a signal to controller 248 that corresponds to the 
relative phases imparted to pulses P1 and P2 by PM's 266 and 206, respectively. 

Once a desired number of pulses are exchanged, the key is derived using prior art 
techniques — for example, by Alice and Bob publicly comparing the basis of their 
measurements and only keeping the measurements (bite) corresponding to the same 
measurement basis. This forms the sifted key. They then choose a subset of the remaining 
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bits to test for the presence of an eavesdropper Eve and then discard these bits. The act of 
eavesdropping on optical fiber 240 by Eve intercepting or otherwise attempting to measure 
the weak optical pulses being transmitted between Bob and Alice will necessarily introduce 
errors in the key due to the quantum nature of the photons being exchanged. If there are 
no errors in the sifted key due to the presence of an eavesdropper Eve, then the 
transmission is considered secure, and the quantum key is established. 

Methods of Maintaining Optimal System Operation 

FIG. 2 is a flow diagram 300 of the method of the present invention for maintaining 
optimal system operation of QKD system 200. The method involves performing both a 
detector gate scan and a detector gate dither in the manner described below. 

In 302, the key exchange process is initiated by controller 248 instructing light 
source 202 to emit optical pulses 204 so that time-multiplexed optical pulses P1 and P2 
can be sent from Bob to Alice. This process includes controller 288 instructing PM 266 to 
phase modulate one of the pulses, having the pulses travel back to Bob, modulating the 
remaining pulse, combining the modulated pulses, and detecting the combined pulse P3, 
as described above. 

In 304, a detector gate scan is performed. This involves varying the timing (e.g., the 
arrival time T) of detector gate pulse S3 over a selected range R1 of timing values to 
establish the optimal gate timing (arrival time) Tmax that yields the maximum number of 
photon counts Nmax detected by detector 216. In an example embodiment of the detector 
gate scan, the detector gate pulse width W is also optionally varied over a selected pulse 
width range RW1 to establish the optimum detector gate pulse width Wmax- 

FIG. 3 is an example plot of the results of a detector gate scan, wherein the Y-axis is 
the number N of photon counts obtained during the detector gate interval (i.e., the gate 
pulse width W). The X-axis represents the relative timing (e.g., arrival time T) of the single- 
photon detector gate pulse S3, which is varied to achieve maximum number of photon 
counts Nmax. In the context of the present invention, the maximum number of photon 
counts Nmax corresponds to optimal system performance because it corresponds to the 
highest data transmission rates and highest photon sensitivity level vs. timing, with no 
increase in dark current counts. Likewise, in an example embodiment of the present 
invention, an optimal optical pulse is one that optimizes the ratio of photon pulses to dark 
event pulses, while maintaining a smooth single-photon detector response that allows for 
detector gate dithering, as described below. 

The curve in FIG. 3 is obtained by incrementing the arrival time T of detector gate 
pulse S3 over a select range R1 of timing values T (X-axis). In an example embodiment, 
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the arrival time T corresponds to the position of the leading edge of the detector gate pulse 
relative to a reference, e.g., a clock reference time provided by controller 248. 

Once Tmax and Nmax are determined, then the process proceeds to 306, wherein the 
detector gate scan is terminated (i.e. is turned OFF). 

In 308, detector gate dithering is performed. This involves repeatedly changing the 
timing (e.g., arrival time T) and/or pulse width W of the gate signal S3 by small amounts 
within a select timing range R2 around the maximum arrival time Tmax (i.e., the detector 
gate signal is "dithered"), and if necessary shifting the arrival time T from its original optimal 
value Tmax to a new optimal value Tmax so that the photon count N is maintained at the 
maximum value Nmax (or alternatively, to a new maximum photon count N'max). Note that 
select range R2 is less than R1 and is selected to surround a relatively small range about 
Tmax- Also note that for optional pulse width dithering, the pulse width is dithered over a 
small range RW2 about the optimal pulse with Wmax. 

In an example embodiment, the timing range R2 is selected to be small enough to 
keep a security attacker (e.g., Eve) from leading the timing off to an undesirable location, 
yet large enough to allow for the dithering process to be successful, i.e., keep the photon 
count N at a maximum value Nmax- 

With reference again to FIG. 3, four data points d1 , d2, d3 and d4 on the curve are 
highlighted for the sake of illustration. Assume the data point d1 is measured first, then the 
data point d2 associated with a larger arrival time value T is measured. Since the number 
of photon counts associated with d2 is less than that associated with d1, the arrival time T 
is decreased. The number of photon counts for the gate pulse position associated with 
data point d1 is re-measured. Since the number of photon counts N associated with the 
second data point at d1 is higher than that associated with data point d2, the arrival time T 
is further decreased and the photons count is measured. The result is data point d3, which 
has a higher photon count than for data point d1. The arrival time T is thus decreased 
again, yield the lower photon count associated with a data point d4. Since this 
measurement is less than that for d3, the arrival time T of detector gating pulse S3 is 
increased, but not so much that it returns to the value associated with data point d2. 

tn this manner, the gate pulse interval is varied back and forth ("dithered") until it 
converges on the maximum (or near-maximum) number of photon counts. Thus, during 
normal operation of single-photon detector 216, the detector gate dither process keeps the 
single-photon sensitivity high. In an example embodiment, detector gate dithering is 
performed periodically, for example every second. In an example embodiment, this rate is 
proportional to the number of single photon counts received. 
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In 310, the choice of performing an autocalibration of the detector gate signal S3 by 
initiating another detector gate scan is presented. If such autocalibration is desired or 
otherwise deemed necessary, then the method proceeds to 312. In 312, the detector gate 
dither is turned OFF and the process returns to the detector gate scan of 304 to perform an 
updated calibration of the detector gate timing and/or detector gate pulse width to find a 
new optimal arrival time Tmax and/or optimal pulse width Wmax. This updated calibration 
may need to be performed for a variety of reasons, such as a detected change in the 
environment or because of normal system drifts. 

In an example embodiment, autocalibration is performed when any of the following 
conditions occur: a) a change in photon count levels outside of statistical limits, b) ambient 
temperature changes greater than a predetermined amount such as 0.5°C occur, c) an 
optical path has changed configuration, as through a switching network element, different 
from event a), as in a message of a pending event will be sent before the change in photon 
count levels, d) on a daily schedule due to known daily temperature cycling, and e) on a 
fixed time basis, such as every hour, whether needed or not. 

The need to turn OFF the detector gate dither prior to performing the detector gate 
scan arises because the two processes can interfere with one another. Specifically, while 
the detector gate scan tries to increment the timing or width of the single photon detector 
gate pulse in a smooth (i.e., incremental) fashion, the detector gate dither tries to adjust the 
variable back and forth over small increments in order to stay on the maximum number of 
photon counts. Consequently, the two competing processes can product spurious results. 
Thus, following a scan and update of the detector gate pulse parameters during the 
detector gate scan of 304, the detector gate dither is automatically (or alternatively, is 
manually) turned back ON. 

If there is no desire or need to perform the autocalibration, then the method remains 
in the detector gate dither process of 308, which as mentioned above is repeated, e.g., 
every second or so. The periodic detector gate dither process generally results in slight 
changes of the value of Tmax in order to maintain the photon count at Nmax, or alternatively 
to maintain the photon count at new maximum values N'max, N"max, etc. For the sake of 
clarity and simplicity, in the present invention, "maximum photon counts" can mean N M ax or 
Nmax or N"max 1 etc. Likewise, the "optimal arrival time Tmax" can change, and so in the 
present invention can mean Tmax, T'max and Tmax, etc. 

In an example embodiment, the above-described method of the present invention is 
embodied in at least one of computer readable medium 250 and 289 and is executed by at 
least one of controller 248 and 288 to carry out the method in QKD system 200. 



